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HP Docket No. 10992199 
METHOD AND SYSTEM FOR TRANSPARENT FILE PROXYING 



TECHNICAL FIELD 

The present invention relates generally to computer networking, and, more 
5 particularly, to a method and system that allow transparent file proxyhig from a local 
area network (LAN) to a remote user connected to the LAN via a wide area network 
(WAN). 

BACKGROUND OF THE INVENTION 

1 o Remote connection to a local network, such as in the case of a telecommuter 

dialing in to the corporate network from home or while traveling, is becoming more and 
more ubiquitous. Typically, a remote user will dial in to the corporate network via a 
wide area network (WAN), such as the public switched telephone network (PSTN), via 
a modem. The remote user will then access computing devices located at the corporate 

1 5 location, typically over a local area network (LAN). Due to the available bandwidth and 
channel capacity, the access speed of the LAN is typically many times greater than the 
access speed of the WAN. The computing devices accessed by the remote user are 
typically referred to as "server systems" or "servers." The servers contain the files that 
the remote user wishes to access and work on. In conventional dial-in arrangements, the 

20 remote user must communicate over both the WAN (to access the corporate location) 
and the LAN (to access the files located on the servers that are connected to the LAN). 
Unfortunately, this arrangement consumes time and processing resources because of the 
typically restricted access speed of the WAN. 



1 



HP Docket No. 10992199 

Therefore, there is a need for a system in which a remote user may access files 
located on a corporate LAN without the need for accessing the WAN for each file 
request. 

SUMMARY OF THE INVENTION 

The invention can be conceptualized as a method for transparent file proxying 
comprising the following steps. Each of a plurality of computing devices is coupled 
to a local area network. At least one of the plurality of computing devices includes 
the ability to route communication packets to the remaining plurality of computing 
devices and each of the plurality of computing devices includes a memory element 
containing a plurality of files. At least one of the plurality of computing devices is 
coupled to a communication network and a remote memory element is also coupled to 
the communication network. The remote memory element is configured to maintain a 
file selected from the plurality of files contained in the memory elements of each of 
the plurality of computing devices. A remote computing device is coupled to the 
remote memory element. The remote memory element intercepts a communication 
message from the remote computing device and provides the selected file to the 
remote computing device when the remote memory element intercepts a 
communication message requesting the selected file from one of the plurality of 
computing devices connected to the local area network. 

In architecture, the invention is a system for transparent file proxying, 
comprising a local network to which is coupled a plurality of computing devices. At 
least one of the plurality of computing devices includes the ability to route 
communication packets to the remaining plurality of computing devices and each of 
the plurality of computing devices includes a memory element containing a plurality 



of files. A communication network is coupled to at least one of the plurality of 
computing devices. A remote memory element is coupled to the communication 
network and is configured to maintain a file selected from the plurality of files 
contained in the memory elements of each of the plurality of computing devices. A 

5 remote computing device is connected to the remote memory element. The remote 
memory element is configured to intercept communication messages from the remote 
computing device, wherein the remote memory element is configured to provide the 
selected file to the remote computing device when the remote memory element 
intercepts a communication message requesting the selected file from one of the 

1 0 plurality of computing devices connected to the local network from the remote 
computing device. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention, as defined in the claims, can be better understood with 
15 reference to the following drawings. The components within the drawings are not 
necessarily to scale relative to each other, emphasis instead being placed upon clearly 
illustrating the principles of the present invention. 

FIG. 1 is a schematic view illustrating a network environment in which the 
intelligent storage appliance (ISA) of the invention resides; 
20 FIG. 2 is a block diagram illustrating, in further detail, the ISA and remote data 

manager (RDM) host processor in accordance with an aspect of the invention; 

FIGS. 3A and 3B collectively illustrate, via block diagrams, the operation of the 
ISA software of the invention; and 

FIGS. 4A and 4B are flowcharts collectively illustrating the communication 
25 packet interception aspect of the invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

Although the preferred embodiment of the method and system for transparent 

5 file proxying will be described in the context of a remote user connecting to a corporate 
LAN via a dial-up (modem) connection, the invention is applicable to any remote user 
that accesses files located on a computing device connected to a LAN via a link that is 
slower than a LAN such as a WAN. 

The method and system for transparent file proxying can be implemented in 

10 hardware, software, firmware, or a combination thereof. In the preferred 

embodiment(s), the invention is implemented in a combination of hardware and 
software or firmware. The software or firmware can be stored in a memory and can 
be executed by a suitable instruction execution system. If implemented in hardware, 
as in an alternative embodiment, the invention can implemented with any or a 

15 combination of the following technologies, which are all well known in the art: a 

discrete logic circuit(s) having logic gates for implementing logic functions upon data 
signals, an application specific integrated circuit (ASIC) having appropriate 
combinational logic gates, a programmable gate array(s) (PGA), a field programmable 
gate array (FPGA), etc. 

20 The software portion of the method and system for transparent file proxying, 

which comprises an ordered listing of executable instructions for implementing 
logical functions, can be embodied in any computer-readable medium for use by or in 
connection with an instruction execution system, apparatus, or device, such as a 
computer-based system, processor-containing system, or other system that can fetch 

25 the instructions from the instruction execution system, apparatus, or device and 



execute the instructions. In the context of this document, a "computer-readable 
medium" can be any means that can contain, store, communicate, propagate, or 
transport the program for use by or in connection with the instruction execution 
system, apparatus, or device. The computer readable medium can be, for example but 

5 not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or 

semiconductor system, apparatus, device, or propagation medium. More specific 
examples (a nonexhaustive list) of the computer-readable medium would include the 
following: an electrical connection (electronic) having one or more wires, a portable 
computer diskette (magnetic), a random access memory (RAM) (electronic), a read- 

10 only memory (ROM) (electronic), an erasable programmable read-only memory 
(EPROM or Flash memory) (electronic), an optical fiber (optical), and a portable 
compact disc read-only memory (CDROM) (optical). Note that the computer- 
readable medium could even be paper or another suitable medium upon which the 
program is printed, as the program can be electronically captured, via for instance 

15 optical scanning of the paper or other medium, then compiled, interpreted or 

otherwise processed in a suitable manner if necessary, and then stored in a computer 
memory. 

Turning now to the drawings, FIG. 1 is a schematic view illustrating a network 
environment 10 in which the intelligent storage appliance (ISA) 100 of the invention 

20 resides. Network environment 10 includes corporate LAN portion 19 and remote client 
network portion 13. Corporate LAN portion 19 includes a plurality of computing 
devices connected via a LAN 25. LAN 25 can be any local area network, for example 
but not limited to, an Ethernet, token ring, or any other local area network. A plurality 
of computing and storage devices, such as servers 21, 22 and 24 are connected to LAN 

25 25 . Servers 2 1 , 22 and 24 typically store files in memory that can be accessed by users 



operating computers connected to the LAN 25. For example, desktop computer 18 
connected to LAN 25 may be used to access a file maintained on server 21, such as, for 
example but not limited to, a word processing document, a graphics file, etc. In this 
manner, any number of desktop computers can be connected to LAN 25 and have access 

5 to shared files on servers 2 1 , 22 and 24. It should be noted that although three servers 
are shown, many more servers are contemplated. Similarly, although only one desktop 
computer 1 8 is illustrated in FIG. 1 for simplicity, it is assumed that many tens or 
hundreds of desktop computers can be connected to LAN 25. Furthermore, each of the 
servers 21, 22 and 24, as well as desktop computer 18 include memory, processing and 

1 0 software elements (not shown) as known to those having ordinary skill in the art. 

Corporate LAN portion 19 also includes a remote access services (RAS) server 
17 and remote data manager (RDM) host processor 200 connected to LAN 25. In 
accordance with an aspect of the invention, RAS server 17 provides a connection 16 
between LAN 25 and a wide area network (WAN) 15. WAN 15 can be, for example 

1 5 but not limited to, the public switched telephone network (PSTN), a general switched 
telephone network (GSTN), or any public data network (PDN). 

In accordance with an aspect of the invention, it is oftentimes desirable for 
someone who has access to LAN 25 while working in the corporate environment to also 
have access to LAN 25 remotely. For example, an employee of the corporation that 

20 maintains LAN 25 might desire to work from home. This is commonly referred to as 
telecommuting. In such an instance, the employee might use remote computer 1 1 to 
gain access, via WAN 15 through RAS server 17, to computing devices (i.e., servers 21, 
22 and 24) located on LAN 25. If connecting directly through WAN 15, RAS server 17 
and LAN 25 to gain access to a file located on server 21, 22 or 24, each command from 
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the remote computer 1 1 must travel across the WAN 15 and into the corporate LAN 
portion 19. 

In accordance with an aspect of the invention, ISA 100 is located at the remote 
client network portion 13 and connected between the remote computer 1 1 and WAN 15. 

5 By executing software instructions located within the ISA 100 and the RDM host 

processor 200, which is connected both to LAN 25 and the WAN 15, commands from 
the remote computer 1 1 sent to ISA 1 00 via connection 1 2 are analyzed by the ISA 1 00 
to determine whether the ISA 100 can satisfy locally the requested service. For 
example, perhaps the ISA 100 can provide locally a file requested by remote computer 

10 1 1 . In cooperation with the RDM host processor 200, and in accordance with a 

predefined set of policies (to be defined in detail below), the ISA 100 will maintain 
mirror copies of files that are located on devices connected to the LAN 25 that a user of 
the remote computer 1 1 may wish to access and can provide those files in a more timely 
manner than would normally be available across a WAN. In this manner, it is not 

15 always necessary for remote computer 1 1 to access LAN 25 via WAN 15 in order to 
view and manipulate the desired files. The above mentioned policies can include user 
policies, group policies and corporate policies and will be defined in further detail 
below. For example, the set of policies within which ISA 100 and RDM host processor 
200 operate to provide mirrored files to the ISA 100 can be specific to remote computer 

20 1 1 . In this manner, the ISA 1 00 can be specifically tailored to provide only files 

authorized for a particular user. Although shown with one ISA 100 connecting one 
remote computer 1 1 to WAN 15, it is contemplated that a number of ISA devices 100 
can connect a plurality of remote computers 1 1 through WAN 15 into LAN 25. 

Essentially, ISA 100, according to the policies defined, exchanges mirrored files 

25 with RDM host processor 200 via WAN 1 5 and via RAS server 1 7 . The files 



maintained by, and mirrored between, the ISA 100 and the EDM host processor 200 are 
a portion of those files maintained within servers 21, 22 and 24, as chosen by RDM host 
processor 200 based upon the policies in effect for the particular user, or users, of the 
ISA 100. hi accordance with an aspect of the invention, any files maintained by ISA 
5 1 00 and modified by remote computer 1 1 will be mirrored back to RDM host processor 
200, via WAN 15 and RAS server 17, so that the corresponding file within one of the 
servers 21, 22 or 24 connected to the LAN 25 can be commensurately updated, hi this 
manner, although the file stored by the ISA 100 is a copy of the file that might reside on 
one of the servers connected to LAN 25, the files are always mirror images of each 

10 other, hi this manner, the integrity of the files is maintained. 

In accordance with an aspect of the invention, ISA 100 monitors communication 
packets sent by remote computer 1 1 to devices connected to LAN 25 via WAN 15. If 
the ISA 100 determines that a requested file is locally stored on the ISA 100, the ISA 
100 will intercept and service the communication packet itself, thereby preventing the 

15 communication packet from traversing the WAN 1 5. In this manner, the ISA 1 00 

locally provides the requested file, which is stored locally on the ISA 100, directly to the 
remote computer 11. As far as the user of the remote computer 1 1 is concerned, the user 
requests and receives the requested file at the speed available on the LAN 12. Typically, 
LAN access speeds are much higher than WAN access speeds. The user of the remote 

20 computer 1 1 does not know or care whether the file is obtained from one of the servers 
located on LAN 25, or whether the file is provided locally by the ISA 100. hi this 
manner, the ISA 100 transparently proxies the requested file to remote computer 11, 
thereby eliminating the requirement that the communication packet, including the 
request for the file, traverse the WAN 15. 
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FIG. 2 is a block diagram illustrating, in further detail, the ISA 100 and RDM 
host processor 200 in accordance with an aspect of the invention. ISA 100 includes 
memory 101, processor 102, WAN interface 106 and network interface 107 in 
communication via logical bus 104. Memory 101 includes the ISA software 300 of the 
5 invention. The ISA software 300 is stored in memory 101 and executed in processor 
102. ISA 100 also includes bulk storage element 108, which can be, for example but not 
limited to, a disk drive. WAN interface 106 connects ISA 100, via connection 14, to 
WAN 15, which is connected to RAS server 17 via connection 16. RDM host processor 
200 connects, via LAN 25, to RAS server 17 and includes a portion of the ISA software 
10 300 of the invention. The ISA software 300 is shown as residing in both RDM host 
processor 200 and in ISA 100 because portions of the software are executed by both the 
ISA 100 and the RDM host processor 200 in order to provide the functionality of the 
invention. Network interface 107 connects ISA 100 via connection 12 to remote 
computer 11. 

1 5 FIGS . 3 A and 3B collectively illustrate, via block diagrams, the operation of the 

ISA software 300 of the invention. Generally, the processing depicted in FIG. 3A 
occurs in the ISA 100 and the processing depicted in FIG. 3B occurs within RDM host 
processor 200. 

Referring now to FIG. 3A, local file server element 302 connects to local client 
20 network 12 via connection 301 . Local client network 12 is the connection between the 
remote computer 1 1 and the ISA 100. Local client network 12 is called a network in 
FIG. 3 A because it is assumed that multiple remote computers could connect to a single 
ISA 100. Local file server element 302 is a software element that provides requested 
files to remote computer 1 1 in a conventional manner, and not associated with the 
25 proxying of the invention. Local file server element 302 is associated with local storage 
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device 354 via connection 304. Local storage device 354, and local storage device 356, 
are different portions of bulk storage device 108 of FIG. 2. It is assumed that the bulk 
storage device 108 of FIG. 2 is a multiple gigabyte disk drive that can be partitioned into 
a number of different local storage elements, or devices. While a portion of the bulk 
5 storage element 108 is devoted to the transparent file proxying of the present invention 
(i.e., local storage device 356), a portion of the bulk storage device 108 is made 
available to the local file server for other functions (i.e., local storage device 354). 

File proxy element 307 is a software routine that is connected to local client 
network 12 via connection 306. File proxy element 307 detects communication packets 

10 from remote computer 1 1 that are destined for one of the devices connected to LAN 25 
(FIG. 1). When file proxy element 307 detects a communication message that includes 
a request for a file that is stored on one of the servers 21, 22 or 24 connected to LAN 25, 
and also stored locally on the ISA 100, the file proxy element 307 will provide that 
requested file from local storage element 356 to the remote computer 1 1 . 

1 5 Dynamic host configuration protocol (DHCP) server 327 connects to local client 

network 12 via connection 326. DHCP server 327, as known in the art, assigns a 
temporary Internet Protocol (IP) address to the ISA 100 when it first connects to WAN 
15. Web server 337 connects to local client network 12 via connection 336 and 
connects to configuration element 343 via connection 338. In this manner, ISA 100 can 

20 be monitored via the world wide web and, through the operation of web server 337, can 
be monitored and updated by a user with a computer, such as remote computer 11, 
connected to local client network 12. 

Authentication block 342 connects to local client network 12 via connection 341 
and provides access control by preventing unauthorized remote computers 1 1 from 

25 accessing either the WAN interface 1 06 or any of the local storage 356. Configuration 

10 



block 343 communicates with configuration database 352 via connection 351 and 
provides configuration information for ISA 100. Configuration block 343 uses the user 
policies, group policies and corporate policies that are stored on configuration database 
352 to allow the ISA 1 00 and the RDM host processor 200 to determine the files that are 
5 mirrored between the ISA 100 and the devices (servers 2 1 , 22 and 24) connected to the 
corporate LAN 25. 

File proxy element 307 also communicates with network address port translation 
(NAPT) element 346 via connection 312 so that the IP addresses associated with the 
ISA 100 will be hidden behind the DHCP address assigned by DHCP server 327. 

10 NAPT element 346 communicates with WAN interface 1 06 via connection 347 to 
enable the ISA 100 to gain access to WAN 15 via connection 14. 

RDM remote file server 314 connects to file proxy element 307 via connection 
308 and also connects to local storage element 356 via connection 317. RDM remote 
file server 314 updates the files on the RDM host processor 200 that correspond to the 

15 files locally stored on the ISA 100 in local storage element 356 when the files are 

updated by a user of the remote computer 1 1 . In this manner, any files that are provided 
locally by the ISA 1 00 to remote computer 1 1 , and that are modified by a user of the 
remote computer 11, will be updated on the RDM host processor 200. This is 
accomplished when the RDM remote file server 314 sends those updated files via 

20 connection 3 1 8 to WAN interface 1 06 for transmission to WAN 1 5, and through RAS 
server 17 to RDM host processor 200. In this manner, files stored on ISA 100 are mirror 
images of the files provided by the RDM host processor 200. Specifically, when a file 
that resides on one of the servers 21, 22 or 24 is mirrored to an ISA 100 and updated by 
a user of remote computer 1 1, that file is also updated on the server 21, 22 or 24 from 

25 which it originated. 



RDM remote file server 314 also communicates with RDM contact manager 329 
via connection 319. RDM contact manager 329 communicates via connection 318 
through WAN interface 106 and ultimately with ISA contact manager 381 (FIG. 3B) 
within RDM host processor 200. The RDM contact manager 329 and the ISA contact 

5 manager 381 cooperate to provide the exchange of files between the ISA 100 and RDM 
host processor 200. 

RDM remote file server 314 also communicates via connection 316 with 
differencing element 321, compress/decompress element 322 and encrypt/decrypt 
element 324. Differencing element 321 identifies only the differences (deltas) between a 

l o given file stored on the ISA 1 00 and a server on the corporate LAN 25 . 

Compress/decompress element 322 uses well known algorithms to compress or 
decompress the deltas provided to it by differencing element 321. Encrypt/decrypt 
element 324 uses well known algorithms to encrypt or decrypt the compressed deltas 
provided to it by the compress/decompress element 322. By storing an original of a file 

15 in the ISA 1 00, and a series of deltas to it, the revisions to the file may be easily 
reconstructed, thereby allowing the files to be easily mirrored across the WAN 50. 

RDM contact manager 329 also communicates with file/directory index data 
element 349 via connection 33 1 . The file/directory index data element 349 indexes and 
stores metadata for the files or directories that are of interest as defined by the 

20 user/group/corporate policies stored in configuration data element 352. Metadata 

represents data about the data being stored in local storage element 356. For example, 
the metadata stored in file/directory index data element 349 may include the title, 
subject, author, and the size of a file stored in local storage element 356. 

Simple network management protocol (SNMP) element 339 also communicates 

25 with WAN interface 106 via connection 335. SNMP element 339 is a software element, 



which allows monitoring of the ISA 100 via the WAN 15. Generally, the SNMP 
element 339 monitors runtime operation of the ISA 100 and passes health information 
back to a network management tool (not shown) running somewhere on the corporate 
LAN 25. Potentially the SNMP element 339 could also update some configuration 
5 information for the ISA 100 if the management application were sophisticated 
enough. 

FIG. 3B is a block diagram illustrating the operation of the portion of the ISA 
software 300 that resides within the RDM host processor 200. 

ISA remote file server 358 is a software component that connects to LAN 25 via 

10 connection 357 and corresponds to the RDM remote file server 314 of FIG. 3A. ISA 
remote file server 358 obtains, from local storage element 361 via connection 359, the 
data that is to be sent to the ISA 100 to allow mirroring of files to occur. ISA remote file 
server 358 also communicates via connection 374 with differencing element 356, 
compress/decompress element 377 and encrypt/decrypt element 378. The operation of 

15 differencing element 356, compress/decompress element 377 and encrypt/decrypt 
element 378 is similar to the operation of differencing element 321, 
compress/decompress element 322 and encrypt/decrypt element 324, respectively, as 
described above. Generally, and as described above, only compressed delta information 
relating to the files stored on the ISA 100 is exchanged between the ISA 100 and the 

20 RDM host processor 200. ISA remote file server 358 also communicates with ISA 

contact manager 381 via connection 362 to determine which data stored in local storage 
element 361 is to be transferred to ISA 100. 

File/directory polling engine 366 is a software component that communicates 
with LAN 25 via connection 364 and communicates with file/directory index data 

25 element 399 via connection 367. File/directory polling engine 366 is the software 



element that, based on the user policies, group policies and corporate policies stored in 
configuration element 343 (FIG. 3A), checks for updates to any files on servers 
connected to the corporate LAN 25 that are listed in the policies stored in policy 
database 388. If the file/directory polling engine 366 finds any files that have been 
5 updated, and hence need to be mirrored to a given ISA 100, it notifies the ISA contact 
manager 381, which in turn queues a request to the ISA remote file server 358 via 
connection 362. Essentially, and assuming that more than one ISA 100 is part of the 
network, the files of interest to any remote ISA 100 may overlap. In order to avoid 
using excessive corporate LAN bandwidth by looking at the files of interest more than 

10 once, the polling engine polls the corporate LAN for the superset of files of interest to 
all ISA devices combined, and queues requests to ISA remote file server 358 via ISA 
contact manager 381. ISA remote file server 358 then gets any given file only once, 
performs the difference, compress and encrypt functions, and then stores that bit of 
data, ready for transmission over the WAN, in storage element 361. 

15 Notification engine 372 connects to LAN 25 via connection 371 and is a 

software element that can be programmed to notify a remote user or a local user, for 
example via e-mail or some other notification means, when a file has been updated. 
Notification engine 372 communicates with file/directory polling engine 366 via 
connection 369 to obtain the file update information. 

20 The ISA contact manager 38 1 connects to LAN 25 via connection 379 and 

corresponds to the RDM contact manager 329 of FIG. 3A. The ISA contact manager 
381 is a software element that monitors ISA 100 for management purposes. ISA contact 
manager 381 communicates with RDM/ISA policy access and configuration element 
386 via connection 382. RDM/ISA policy access and configuration element 386 
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communicates with policy database 388, which stores the RDM/ISA corporate, group 
and user policies that define the files that are mirrored to the ISA 1 00. 

Web server 391 communicates with LAN 25 via connection 389 and is 
configured to allow the administration of ISA software 300 via the World Wide Web. 
5 Web server 391 corresponds, and is similar, to web server 337 in FIG. 3A. Web server 
391 communicates with ISA user status monitoring element 396, which communicates 
with ISA status database 398 via connection 397. ISA user status monitoring element 
396 monitors the status of any ISA 100 connected to WAN 15 and to LAN 25. 

FIGS. 4A and 4B are flowcharts collectively illustrating the communication 

10 packet interception aspect of the invention. Any process descriptions or blocks in the 
following flow charts should be understood as representing modules, segments, or 
portions of code which include one or more executable instructions for implementing 
specific logical functions or steps in the process, and alternate implementations are 
included within the scope of the preferred embodiment of the present invention in 

1 5 which functions may be executed out of order from that shown or discussed, including 
substantially concurrently or in reverse order, depending on the functionality involved, 
as would be understood by those reasonably skilled in the art of the present invention. 

Referring now to FIG. 4 A, in block 401, the file proxy routine 307 (FIG. 3 A) 
detects a communication message from remote computer 1 1 (FIG. 1). In accordance 

20 with an aspect of the invention, file proxy routine 307 determines the type of 

communication message it has intercepted, and, based on the type of packet detected, 
determines whether to forward the packet to the WAN 15 for communication to LAN 
25, or to service the packet itself in the ISA 100. Analysis is performed using well 
understood algorithms for analyzing International Standards Organization (ISO) level 3 
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and 4 packets, and is based on the CIFS 1.0/LM 0.12 specifications governing server 
message block (SMB)/common Internet file service (CIFS) communication. 

In block 402, the file proxy routine 307 determines whether the intercepted 
packet is an SMB/CIFS packet type. An SMB packet type is also commonly referred to 
5 as a CIFS packet. If it is determined in block 402 that the packet is not an SMB/CIFS 
packet type, then, in block 407, the packet is forwarded by ISA 100 to WAN 15. If, in 
block 402, the packet is determined to be an SMB/CIFS type, then in block 404, the file 
proxy routine 307 determines whether the packet requests a file operation. If the packet 
does not request a file operation, then, in block 407, the packet is forwarded to WAN 15. 

10 If, in block 404, it is detemiined that the intercepted packet requests a file operation, the 
file proxy routine 307, in block 406, will determine whether the requested file is on the 
list of files in the user/group/corporate policy via RDM contact manager 329. This list 
includes the sum total of files/directories listed in a given ISA policy of which the ISA 
100 currently has a local up-to-date copy. The RDM contact manager 329, having 

15 visibility into the file/dir index 349 and the configuration information (configuration 
database 352), maintains this synthesized list. 

If, in block 406, the file proxy routine 307 detenriines that the requested file is 
not on the proxy list, then in block 407, the packet will be forwarded to WAN 1 5 for 
communication to LAN 25. If, in block 406, it is determined that the requested file is on 

20 the proxy list, then in block 408, the file proxy routine 307 determines whether the 
packet is a file "read" request. 

If the file proxy routine 307 determines, in block 408, that the packet is a file 
read request, then in block 409 the file proxy routine 307 obtains the file from local 
storage element 356 (in block 421) and provides that file to the remote computer 1 1. In 
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this manner, the ISA 100 emulates the remote network connection and transparently 
proxies the requested file to the remote computer 1 1 . 

If, in block 408, it is determined that the packet is not a file read request, then in 
block 411 the file proxy routine 307 determines whether the packet is a file "write" 
5 request. If the packet is a file write request, then the file proxy routine 309 will write the 
packet to local storage element 356 for storage, and emulate the remote network 
connection, thereby intercepting the packet and executing the request locally within the 
ISA 100. After the packet is written to local storage in block 412, in block 419 the file 
proxy routine 307 notifies the RDM contact manager 329 (FIG. 3 A) and the RDM 

1 0 remote file server 314 (FIG. 3 A) of the file modification so that the data necessary to 
reconstruct the modified file on the appropriate device (server 21, 22 or 24) connected to 
the corporate LAN 25 can be mirrored back (transferred) to the RDM host processor 
200. The RDM host processor 200 then reconstructs the modified file on the 
appropriate server 21, 22 or 24, from which the file originated. 

15 If, in block 4 1 1 , it is determined that the packet was not a file write request, then 

in block 414 the file proxy routine 307 determines whether the packet contains a 
"rename" or "delete" request. If the packet detected by the file proxy routine 307 
contains a rename or delete request, then in block 416 the file proxy routine 307 
accesses the local copy of the file located in local storage element 356 (FIG. 3 A) and 

20 modifies the metadata for the local copy, emulating the network connection to the 

remote computer 1 1 , thereby providing the transparent file proxy function in accordance 
with that aspect of the invention. After the file proxy routine 307 modifies the local 
copy in local storage element 356, file proxy routine 307 will notify the RDM contact 
manager 329 and the RDM remote file server 3 14 so that the modified metadata for the 
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local file can be mirrored back to the RDM host processor 200, and then to the 
appropriate server 21, 22 or 24. 

If, in block 414, the file proxy routine 307 determines that the packet did not 
contain either a rename or delete request, then in block 417 the file proxy routine 307 
5 determines that the intercepted packet is another SMB/CIFS file operation. 

Accordingly, in block 418 the SMB/CIFS emulation is performed using the locally 
stored file and in block 417 the file proxy routine 307 again notifies the RDM contact 
manager 329 and the RDM remote file server 314 that the local copy was modified. 
This causes the modified local copy to be mirrored back to the RDM host processor 200 

1 0 and the appropriate server 2 1 , 22 or 24. 

It will be apparent to those skilled in the art that many modifications and 
variations may be made to the preferred embodiments of the present invention, as set 
forth above, without departing substantially from the principles of the present 
invention. All such modifications and variations are intended to be included herein 

1 5 within the scope of the present invention, as defined in the claims that follow. 
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CLAIMS 

What is claimed is: 



1 A. A method for transparent file proxying, the method comprising the 

2 steps of: 

3 coupling a plurality of computing devices to a local area network, at least one 

4 of said plurality of computing devices including the ability to route communication 

5 packets to said remaining plurality of computing devices, each of said plurality of 

6 computing devices including a memory element containing a plurality of files; 

7 coupling said at least one of said plurality of computing devices to a 

8 communication network; 

9 coupling a remote memory element to said communication network, said 

10 remote memory element configured to maintain a file selected from said plurality of 

1 1 files contained in the memory elements of each of said plurality of computing devices; 

12 coupling a remote computing device to said remote memory element; 

13 intercepting, in said remote memory element, a communication message from 

14 said remote computing device; and 

15 providing said selected file to said remote computing device when said remote 

16 memory element intercepts said communication message from said remote computing 

17 device if said communication message requests said selected file from one of said 

18 plurality of computing devices connected to said local area network. 
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1 2. The method of claim 1 , wherein said at least one of said plurality of 

2 computing devices periodically updates said selected file maintained in said remote 

3 memory element. 

1 3 . The method of claim 1 , wherein said selected file is chosen to be 

2 maintained in said remote memory element based upon any of a plurality of policies. 

1 4. The method of claim 3, wherein said plurality of policies are chosen 

2 from the group consisting of user policies, group policies and corporate policies. 

1 5. The method of claim 1 , wherein said remote memory element updates 

2 said selected file and causes a file located in said plurality of files and corresponding 

3 to said selected file to be updated. 

1 ^ svs t em f° r transparent file proxying, comprising: 

2 a local network to which is coupled a plurality of computing devices, at least 

3 one of said plurality of computing devices including the ability to route 

4 communication packets to said remaining plurality of computing devices, each of said 

5 plurality of computing devices including a memory element containing a plurality of 

6 files; 

7 a communication network coupled to said at least one of said plurality of 

8 computing devices; 

9 a remote memory element coupled to said communication network and 

10 configured to maintain a selected file selected from said plurality of files contained in 

1 1 the memory elements of each of said plurality of computing devices; 
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a remote computing device connected to said remote memory element, said 
remote memory element configured to intercept communication messages from said 
remote computing device; and 

wherein said remote memory element is configured to provide said selected 
file to said remote computing device when said remote memory element intercepts a 
communication message from said remote computing device, said communication 
message requesting said selected file from one of said plurality of computing devices 
connected to said local network. 

7. The system of claim 6, wherein said at least one of said plurality of 
computing devices periodically updates said selected file maintained in said remote 
memory element. 

8. The system of claim 6, wherein said selected file is chosen to be 
maintained in said remote memory element based upon any of a plurality of policies. 

9. The system of claim 8, wherein said plurality of policies are chosen 
from the group consisting of user policies, group policies and corporate policies. 

10. The system of claim 6, wherein said remote memory element updates 
said selected file and causes a file located in said plurality of files and corresponding 
to said selected file to be updated. 



\j. A computer readable medium having a program for transparent file proxying, 

the program comprising logic configured to perform the steps of: 
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coupling a plurality of computing devices to a local area network, at least one 
of said plurality of computing devices including the ability to route communication 
packets to said remaining plurality of computing devices, each of said plurality of 
computing devices including a memory element containing a plurality of files; 

coupling said at least one of said plurality of computing devices to a 
communication network; 

coupling a remote memory element to said communication network said 
remote memory element configured to maintain a file selected from said plurality of 
files contained in the memory elements of each of said plurality of computing devices; 

coupling a remote computing device to said remote memory element; 

intercepting, in said remote memory element, a communication messages from 
said remote computing device; and 

providing said selected file to said remote computing device when said remote 
memory element intercepts a communication message from said remote computing 
device, said communication message requesting said selected file from one of said 
plurality of computing devices connected to said local area network. 

12. The program of claim 1 1, wherein said at least one of said plurality of 
computing devices periodically updates said selected file maintained in said remote 
memory element. 

13. The program of claim 1 1, wherein said selected file is chosen to be 
maintained in said remote memory element based upon any of a plurality of policies. 
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14. The program of claim 13, wherein said plurality of policies are chosen 
from the group consisting of user policies, group policies and corporate policies. 

1 5 . The program of claim 1 1 , wherein said remote memory element 
updates said selected file and causes a file located in said plurality of files and 
corresponding to said selected file to be updated. 
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ABSTRACT OF THE DISCLOSURE 

A method and system for transparent file proxying allows an intelligent 
storage appliance (ISA) that connects a remote computer connected to a local area 
network (LAN) through a wide area network (WAN) to locally provide to the remote 
5 computer files that would otherwise be obtained from a computing device connected 
to the LAN over the WAN. Based upon policies that include user policies, group 
policies and corporate policies, selected files are transferred (or mirrored) from the 
computing devices connected to the LAN to the ISA. When the remote computer 
desires to access a file, the ISA intercepts and analyzes the file request. If the ISA 

10 determines that the requested file is one that is locally stored on the ISA, the ISA 
intercepts and services the request locally (thereby preventing the request from 
traversing the WAN), and transparently proxies the selected file to the remote 
computer. A user of the remote computer views the file, unaware that the file is 
locally provided by the ISA. If the user modifies the file, the ISA forwards data 

15 necessary to reconstruct a modified copy of the file to a computing device connected 
to the LAN, thereby maintaining file integrity between the file located on a computing 
device connected to the LAN and the copy locally stored on the ISA. Similarly, if a 
file that is locally stored on the ISA is modified while on the computing device 
connected to the LAN, data necessary to reconstruct an updated version of the file is 

20 forwarded (mirrored) to the ISA. 
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